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IPv6  Presentation:  Objectives 

Dominant  Air  Power:  Design  For  Tomorrow. .  .Deliver  Today 


1.  To  give  some  background  information  on 
network  infrastructure 

2.  To  give  some  background  information  on 
network  protocois 

3.  To  introduce  Internet  Protocol  version  6 

4.  To  discuss  appiication  software  changes 
necessary  to  accommodate  IPv6 

5.  Security 

6.  Transition  Mechanisms 
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1 .0  Two  Models  for  a  Network 
( The  IP  Stack) 

■  Dominant  Air  Power:  Design  For  Tomorrow. .  .Deliver  Today  ■ 


OSI  Model 
7.  Application 
6.  Presentation 
5.  Session 
4.  Transport 
3.  Network 
2.  Data  Link 
1.  Physical 


DoD  Model 
(TCP/IP  model) 

Process/Application 
Host  to  Host 
Internet 

Network  Access 
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1.1  Socket  to  My  Port 

Dominant  Air  Power:  Design  For  Tomorrow. .  .Deliver  Today 


•  A  process  is  an  application  to  which  the  operating 
system  assigns  an  identification  number 

•  Port  numbers  are  used  at  the  transport  layer  to 
keep  track  of  host-to-host  virtual  circuits, 
allowing  one  operating  system  to  identify  a 
process  on  another  operating  system  by  creating 
(host,  port)  pairs 

•  A  socket  is  an  application  programming  interface, 
originally  provided  by  the  Berkeley  distribution  of 
Unix,  that  is  used  to  implement  a  port. 
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1 .2  Network  Infrastructure 

■  Dominant  Air  Power:  Design  For  Tomorrow. .  .Deliver  Today  ■ 


1.  Topology  (physical  layout) 

1.  Point  to  point  link 

2.  Bus  (Ethernet) 

3.  Star  (hub  and  spoke) 

4.  Mesh 

5.  Ring 

2.  Architecture 

1 .  How  the  components  are  designed  to  interact 

2.  ISO  and  Internet  (Internet  is  sometimes  called 
DoD) 

3.  Technologies 
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1 .3  Data  Interchange  Technologies 
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•  Most  common  data  interchange  mechanism  is 
the  Ethernet 

-  IEEE  802.3  standard 

-  http://www.ethermanage.com/ethernet/ethernet.html 

•  Another  is  Asynchronous  Transfer  Mode  (ATM) 

•  Token  Ring 

•  IEEE  802.11  also  known  as  Wi-Fi 

•  Firewire  (iEEE  1394,  RFC  2734  for  IPv4  and  RFC 
3146  for  IPv6 
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1.4  Some  Internet  Organizations 
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•  International  Organization  for  Standardization  (ISO) 

•  Internet  Assigned  Number  Authority  (lANA) 
http://www.iana.org 

•  Internet  Engineering  Task  Force  (IETF)  is 
responsible  for  protocol  standards  http://www.ietf.org 

•  American  Registry  for  Internet  Numbers  (ARIN) 
http://www.arin.net 

•  Widely  Integrated  Distributed  Environment  (WIDE) 
http://www.wide.ad.jp 

•  Internet  Corporation  for  Assigned  Names  and 
Numbers  (ICANN)  hhtp://icann.org 
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1.5  Data  Interchange,  Endian 

Dominant  Air  Power:  Design  For  Tomorrow. .  .Deliver  Today 


*  Big  endian,  most  significant  bit  of  a  word  is  in  the 
byte  with  the  iowest  address. 

*  Littie  Endian,  most  significant  bit  of  a  word  is  in 
the  byte  with  the  highest  address. 

•  Motorola,  Sun  Sparc,  IBM  Power  PC  -  Big  Endian 

*  Intei  80X86,  DEC  -  Little  Endian 

•  The  TCP/IP  standard  network  byte  order  is  big 
endian 

•  For  Ethernet,  byte  order  is  big  endian,  but  bit 
transmission  order  for  each  byte  is  iittie  endian 
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2.0  Network  Protocols 

Dominant  Air  Power:  Design  For  Tomorrow. .  .Deliver  Today 


•  There  are  routing  protocols  and  routable 
protocols 

•  Two  main  routable  Internet  Protocols  (IP) 

-  Transmission  Controi  Protocol  (TCP) 

-  User  Datagram  Protocol  (UDP) 

•  Others,  but  UDP  is  most  often  used  for 
realtime  applications,  and  TCP  is  used  for 
reliable  but  slow  applications 
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2.1  Dual  Stack  Architecture 

^  Dominant  Air  Power:  Design  For  Tomorrow. .  .Deliver  Today  " 


Application 

Layer 

TCP/UDP 

TCP/UDP 

IPv6 

IPv4 

Network 

Interface  Layer 
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2.2  Dual  IP  Layer  Architecture 
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Application 

Layer 


Transport  Layer  (TCP/UDP) 


Network 
Interface  Layer 
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2.3  Routing  Protocols 

Dominant  Air  Power:  Design  For  Tomorrow. .  .Deliver  Today 


•  Routing  protocols  define  the  set  of  rules  used  by 
a  router  when  it  trades  routing  information  with 
neighboring  routers 

•  Two  classes: 

-  Interior  gateway  protocols  (IGPs) 

-  Exterior  Gateway  Protocols  (EGPs) 

•  Interior  gateway  protocols  are  used  to  exchange 
routing  information  with  routers  in  the  same 
autonomous  system  (AS) 

•  Exterior  gateway  protocols  are  used  by  routers  to 
communicate  between  ASs 


An  AS  is  a  collection  of  networks  under  a  common  administrative  domain 
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2.4  Classes  of  Routing  Protocols 
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1.  Distance  vector:  (each  time  a  packet 
goes  through  a  router,  that’s  cailed  a 
hop) 

2.  Link  State,  aiso  called  shortest  path  first, 
uses  three  tabies: 

1.  attached  neighbors, 

2.  topology  of  network,  and 

3.  routing  table 

3.  Hybrid 

4.  Path  Vector  (i.e.  Border  Gateway 
Protocoi  RFC  1771) 
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2.5  Some  Process  or  Application  Layer  \ 


Protocois  (Routed) 
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•  Telnet,  see  Request  For  Comments  (RFC)  318 

•  File  Transfer  Protocol  (FTP),  RFC  454 

•  Trivial  File  Transfer  Protocol  (TFTP) 

•  Network  File  System  (NFS) 

•  Simple  Mail  Transfer  Protocol  (SMTP) 

•  Simple  Network  Management  Protocol  (SNMP) 

•  Domain  Name  System  (DNS) 

•  Dynamic  Host  Configuration  Protocol  (DHCP) 

•  Distributed  Interactive  Simuiation  (DIS),  IEEE 


1278 
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2.6  Host  to  Host  Layer  Protocols 
(Routed,  Transport  layer) 

Dominant  Air  Power:  Design  For  Tomorrow. .  .Deliver  Today 


*  TCP  and  UDP  headers  contain  a  checksum  field 
for  detecting  packet  corruption,  and  these 
checksums  include  a  pseudo  header  that 
contains  IP  header  fields,  like  source  and 
destination  addresses 

*  These  addresses  are  now  128  bits  in  IPv6,  but 
were  only  32  bits  in  IPv4 

*  UDP  checksum  is  optional  in  IPv4,  but  mandatory 
in  IPv6 

*  The  packet  format  of  TCP  or  UDP,  and  the 
algorithms  to  implement  them,  do  not  change  for 
IPv6 
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Internet  Layer  Protocols  (Routing) 

■  Dominant  Air  Power:  Design  For  Tomorrow. .  .Deliver  Today 


•  Internet  Protocol  (IP) 

•  Internet  Control  Message  Protocol  (ICMP) 

•  Address  Resolution  Protocol  (ARP) 

•  Reverse  Address  Resolution  Protocoi 


•  RIPng  defined  in  RFC  2080 

-  A  distance  vector  protocol 

•  OSPF  defined  in  RFC  2740 

-  A  link  state  protocol 

•  IS-IS 

-  A  link  state  protocol 

•  BGP-4  (RFC  1771) 
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4  1 

3.0  Internet  Protocol  version  6  (IPv6) 

Dominant  Air  Power:  Design  For  Tomorrow. .  .Deliver  Today 


•  New  header  allows  faster  processing 

•  Addressing  changes 

•  Security  improvements 

•  Protocoi  changes 
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Differences  Between  IPv4  and  IPv6 

■  Dominant  Air  Power:  Design  For  Tomorrow. .  .Deliver  Today 


Feature 

IPv4 

IPv6 

Address  length 

32  bits 

128  bits 

IPSec  support 

Optional 

Required 

Fragmentation 

Hosts  and  routers 

Hosts  only 

Packet  size 

576  bytes 

1 280  bytes 

Checksum  in  header 

Yes 

No 

Options  in  header 

Yes 

No 

Link-layer  address 
resolution 

ARP  (broadcast) 

Multicast  Neighbor 
Discovery  Messages 

Multicast  membership 

Internet  Group 

Management  Protocol 

Multicast  Listener 

Discovery  (MLD) 

Router  Discovery 

Optional 

Required 

Uses  broadcasts 

Yes 

No 

Configuration 

Manual,  DHCP 

Automatic,  DHCP 

DNS  name  queries 

Uses  A  records 

Uses  AAAA  records 

DNS  reverse  queries 

Uses  IN-ADDR.ARPA 

Uses  IP6.INT 

3.2  Header  Information 

Dominant  Air  Power:  Design  For  Tomorrow. .  .Deliver  Today 


1.  IPv6  header  is  fixed  size  (40  bytes) 

2.  Structure  foliows: 

1.  Version 

2.  Traffic  class 

3.  Flow  label 

4.  Payload  length 

5.  Next  header  field 

6.  Hop  limit 

7.  Source  address 

8.  Destination  address 

3.  Makes  for  faster  processing 
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3.3  IPv6  Extension  Headers 

^  Dominant  Air  Power:  Design  For  Tomorrow. .  .Deliver  Today  * 


•  IPv6  header  does  not  have  an  options  field  like  in  IPv4 ,  but 
handles  options  in  additional  headers  called  Extension 
Headers 

•  The  simpler  a  packet  header,  the  faster  it  can  be  processed 

•  Each  extension  header  implements  an  optional  feature 

•  There  can  be  zero,  one,  or  more  Extension  header  in  an 
IPv6  packet 

•  The  extension  headers  can  be  much  larger  than  the 
maximum  length  of  IPv4  options 

•  The  extension  headers  exist  between  the  IPv6  header  and 
upper  layer  protocol  headers 

•  New  Extension  headers  can  be  defined  without  changing 
the  original  IPv6  header  format 

•  Extension  headers  are  processed  in  the  order  that  was  set 
in  the  packet  by  the  source,  but  there  is  a  recommended 
ordering  and  number  of  occurrences 
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3.4  Hop-by-Hop  Options  Header 
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•  Except  for  the  Hop-by-Hop  options  header,  the  Extension 
headers  are  processed  oniy  by  the  node  identified  in  the 
Destination  address  fieid  of  the  IPv6  header 

•  When  the  Extension  header  is  this  one  (vaiue  of  zero  in  the 
Next  Header  fieid  of  the  IPv6  header),  every  node  in  the 
path  processes  the  information 

•  In  IPv4,  the  only  way  for  a  router  to  determine  if  it  needs  to 
examine  a  datagram  is  to  partialiy  process  some  of  it 

•  In  IPv6,  the  router  need  only  look  for  a  Hop-by-Hop  header 
(result  =  increased  speed) 

•  An  option  in  the  Hop-by-Hop  header  is  the  Jumbo  Payioad 
defined  in  RFC  2675  that  permits  sending  iarge  IP  packets 
and  speeds  up  sending  image  data 
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3.5  Addresses 

Dominant  Air  Power:  Design  For  Tomorrow. .  .Deliver  Today 


•  IPv4,  4  bytes,  (32  bits) 

-  172.67.10.4 

-  Four  sets  of  eight  bits  converted  to  decimai  and 
separated  by  periods  (dotted-decimai) 

•  IPv6, 16  bytes  (128  bits) 

-  3f f e :2900 :d005 :f 282 :204 :5aff :f e56 : 1 006 

-  Eight  sets  of  16  bits,  converted  to  a  4-digit  hexadecimai 
number  separated  by  coions  (coion  hexadecimai) 

•  IPv6  addresses  have  a  type  and  a  scope. 

•  The  scope  defines  an  area  of  the  network  in 
which  the  address  is  unique  and  reievant. 

•  Three  types  are  Unicast,  Muiticast,  and  Anycast. 

•  An  IPv6  router  will  not  forward  a  packet  over  an 
interface  that  does  have  the  correct  scope. 

•  64  bits  for  subnet  ID,  64  bits  for  interface  ID 
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3.6  Address  Types 

Dominant  Air  Power:  Design  For  Tomorrow. .  .Deliver  Today 


1 .  Unicast  -  identifies  a  single  network 
interface;  packets  delivered  to  that  single 
interface 

2.  Anycast  -  identifies  a  group  of  network 
interfaces;  packets  delivered  to  a  single 
interface  of  that  group 

3.  Multicast  -  identifies  a  group  of  network 
interfaces;  packets  delivered  to  all 
members  of  that  group 

4.  No  broadcast  type  in  IPv6 
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3.7  IPv6  Address  Prefixes 

■  Dominant  Air  Power:  Design  For  Tomorrow. .  .Deliver  Today  • 


•  The  prefix  part  of  the  address  has  fixed 
values  and  are  the  bits  that  identify  a 
route  or  subnet 

•  IPv6  subnets  use  address/prefix-length 
notation,  which  is  the  same  as  IPv4 
Classless  Inter-Domain  Routing 

-  21DA:D3::/48  for  a  route 

-  21DA:D3:0:2F3B::/64  for  a  subnet 

•  No  need  for  dotted  decimal  subnet  mask 
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3.8  Address  Scopes 
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1.  Unicast  address  scopes 

1.  Link-local  address  is  valid  only  within  the  network  link 
to  which  the  interface  is  assigned  (determined  by 
physical  property  of  network) 

2.  Site-local  address  is  valid  between  nodes  in  the  same 
site.  Can  replace  IPv4  private  addresses 

3.  Global  address  is  valid  in  the  entire  internet 

2.  Multicast  address  scopes  (4  bits  =16  types) 

1 .  Interface  local 

2.  Link-local,  site-local,  global 

3.  Admin-local 

4.  Organization-local 
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3.9  Address  Lifetimes 

Dominant  Air  Power:  Design  For  Tomorrow. .  .Deliver  Today 


•  An  IPv6  address  has  two  kinds  of  lifetime 

1.  Preferred  lifetime 

2.  Vaiid  iifetime 

•  An  address  is  called  a  deprecated 
address  if  its  preferred  lifetime  has 
expired 

-  cannot  be  used  for  initiating  new 
connections,  but 

-  can  stili  be  used  for  existing  connections 
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!'  3.10  Internet  Control  Message  Protocol 


(ICMP)  for  IPv6  (ICMPvG) 


Dominant  Air  Power:  Design  For  Tomorrow. .  .Deliver  Today 


•  Defines  the  basic  protocoi  messages  for 
error  reporting  and  network  diagnostics 
(RFC2463,  and  updated  as  RFC4443) 

•  Supplies  node  information  query,  or  ping6 

•  Provides  Neighbor  Discovery,  Muiticast 
Listener  Discovery,  Path  Maximum 
Transmission  Unit  Discovery 

•  Does  much  of  what  ARP  did  for  IPv4 

•  ICMP  filtering  can’t  be  treated  the  same  as 
in  IPv4  because  ICMPvG  is  vitai  to  the 
workings  of  IPv6 
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3.1 1  Neighbor  Discovery  (ND) 

Dominant  Air  Power:  Design  For  Tomorrow. .  .Deliver  Today 


•  IPv6  ND  protocol  (RFC2461)  operates 
differently  on  hosts  and  routers 

•  ND  operates  at  the  ICMPvG  layer 

•  Enables  address  resolution 

•  A  host  can  determine  the  presence  of 
routers  through  active  queries  or  through 
the  passive  reception  of  Router 
Advertisements 

•  Replaces  Address  Resolution  Protocol, 
ICMPv4  Router  Discovery,  and  ICMPv4 
Redirect  messages 
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3.12  Stateless  Address 
Autoconfiguration 

Dominant  Air  Power:  Design  For  Tomorrow. .  .Deliver  Today 


•  A  global  routing  prefix  is  the  high-order  bits  of  an 
IP  address  used  to  identify  the  subnet  or  a 
specific  type  of  address  (RFC  4291) 

•  Ethernet  addressing  works  by  using  the  Media 
Access  Control  (MAC)  address  built  into  each 
Ethernet  Network  Interface  Card  (NIC) 

•  Using  this  prefix,  a  booting  IPv6  device  can 
autoconfigure  a  global  IP  address  by  using  either 
its  MAC  identifier  or  a  private  random  number 

•  Aiiows  for  easy  connection  of  mobiie  devices 

•  Works  without  manuai  intervention  (auto)  and 
without  a  server  infrastructure  (stateiess) 
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4.0  Application  Software  Changes 
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•  Any  application  that  uses  an  iP  address 
needs  to  be  updated  to  be  able  to  handle 
the  128  bit  address  format 

•  Hardcoded  32  bit  addresses  should  be 
updated  to  use  a  Domain  Name  Service,  or 
read  from  a  configuration  file 

•  All  checksum  calculations  that  include  the 
IP  address  in  the  calculation  must  be 
updated 

-  In  IPv4,  checksum  In  UDP  header  was  optional, 
but  mandatory  with  IPv6 
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4.1  Socket  Programming 

Dominant  Air  Power:  Design  For  Tomorrow. .  .Deliver  Today 


int  socket  (int  domain,  int  type,  int  protocol) 


•  The  function  prototype  above  is  from  a  Linux 
game  programming  book 

•  First  argument,  domain,  specifies  the  protocol 
family  to  use,  either  PFJNET  or  PF_INET6 

•  Type  is  transport  layer  type,  (SOCK_STREAM  for 
TCP,  or  SOCK_DGRAM  for  UDP) 

•  Protocol  parameter  is  either  IPPROTO_TCP  or 
IPPROTO_UDP 

•  Parsing  algorithm  for  new  address  format  will  be 
different.  Current  simulation  software  reads 
network  addresses  from  a  configuration  file 
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4.2  More  Socket  Stuff 

Dominant  Air  Power:  Design  For  Tomorrow. .  .Deliver  Today 


•  Winsock  is  slightly  different 

-  SOCKET  socket  ( int  af,  int  type,  int  protocol) 

•  Notice  the  first  parameter  is  AF,  for 
Address  Family 

•  Once  the  socket  is  created,  it  is  bound  to 
a  port  number  with  the  bind()  function 

•  The  bind  function  takes  a  socket  address 
data  structure  as  one  of  its  parameters 

•  If  using  Java  or  DirectX,  these  low  level 
matters  are  not  a  concern 
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5.0  IPsec 

Dominant  Air  Power:  Design  For  Tomorrow. .  .Deliver  Today 


•  Three  databases 

-  Security  Policy  Database 

-  Security  Association  Database 

-  Peer  Authorization  Database  (RFC  4301) 

*  Support  for  IPsec  is  mandatory  in  IPv6 

•  Two  Extension  headers 

-  Authentication  header  may  be  supported  (RFC  4302) 

-  Encapsulating  Security  Payload  header  must  be 
supported  (RFC  4303) 

*  The  protocol  often  used  to  negotiate  IPSec 
security  settings  for  unicast  communication  is 
the  Internet  Key  Exchange  protocol 
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5.1  Security,  Hardware 

Dominant  Air  Power:  Design  For  Tomorrow. .  .Deliver  Today 


•  Many  military  organizations  use  General 
Dynamics  encryptors  (TACLANE  and  FASTLANE) 
for  security 

•  FASTLANE  for  ATM  networks,  TACLANE  for  IP 
networks 

•  TACLANE-GigE,  TACLANE-Mini,  TACLANE-Micro 
will  be  dual  stack  with  free  software  upgrades  in 
first  quarter  of  2008 

•  General  Dynamics  has  a  trade  in  program  for 
legacy  TACLANE-Classic  and  TACLANE  E100 
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6.0  Working  Together 

Dominant  Air  Power:  Design  For  Tomorrow. .  .Deliver  Today 


•  Dual-stack  techniques  (RFC  421 3) 

-  Node  has  support  for  both  protocols 

-  Called  an  IPv6/IPv4  node 

•  Tunneling  techniques  (RFC  2473,  RFC  3056,  RFC 
4213) 

-  Also  called  encapsulation 

-  IPv6  traffic  Is  encapsulated  In  IPv4  packets 

-  Explicit  tunnel  setup  Is  not  needed  for  6to4,  where  IPv6 
domains  communicate  via  6to4  gateways 

•  Address  and  Protocol  translation  (RFC  2765,  RFC 
2766) 
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6.1  Other  Translation  Techniques 
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•  6over4  (see  RFC  2529) 

-  Run  on  IPv6  network  using  IPv4  as  the  layer  2  transport 

-  Uses  IPv4  multicast 

-  Maps  IPv6  multicast  addresses  to  IPv4  multicast 
addresses 

•  Intra-Site  Automatic  Tunnel  Addressing  Protocol 
(RFC  4214) 

-  Enables  deployment  of  IPv6  hosts 

•  Teredo 

-  (RFC2663,  “IP  Network  Address  Translator  (NAT) 
Terminology  and  Considerations”) 

•  Generic  Routing  Encapsulation  (GRE) 

-  RFC  2784  and  is  designed  to  encapsulate  any  protocol 
in  another  protocol 

•  Others  -  see  references 
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7.0  Overall 

Dominant  Air  Power:  Design  For  Tomorrow. .  .Deliver  Today 


•  My  interest  is  for  a  virtuai  simuiation  network 

•  Security  is  number  one  issue,  but.. 

•  Speed  is  what  makes  it  a  beiievabie  simuiation 

•  The  new  header  speeds  up  packet  processing,  but  the 
IPsec  siows  down  packet  processing  if  configured 

•  Not  using  ARP,  which  is  a  broadcast  protocoi,  increases 
speed  because  every  time  a  host  receives  a  broadcast 
packet,  it  has  to  process  it,  but  ICMPv6  is  more  active  than 
in  IPv4 

•  Experimentation  wiii  be  required  to  determine  if  IPv6  will  be 
better  than  IPv4  for  some  purposes 

•  Get  more  information  from  Air  Force  IPv6  Transition  site 
community  of  practice 
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7.1  Acronym  List 


X 


•  AAAA  -  quad  A,  not  an  acronym.  A  records  in  IPv6  are  4 
times  iarger  than  A  records  for  IPv4 

•  ARP  -  Address  Resolution  Protocoi 

•  ATM  -  Asynchronous  Transfer  Mode 

•  DHCP  -  Dynamic  Host  Configuration  Protocoi 

•  DNS  -  Domain  Name  Service 

•  DoD  -  Department  of  Defense 

•  ICMP  -  Internet  Control  Message  Protocol 

•  IEEE  -  Institute  of  Eiectricai  and  Eiectronics  Engineers 

•  IETF  -  Internet  Engineering  Task  Force 

•  IGMP  -  Internet  Group  Management  Protocol 

•  IP-  Internet  Protocol 

•  IPv4  -  Internet  Protocol  version  4 

•  IPv6  -  Internet  Protocol  version  6 

•  MLD  -  Muiticast  Listener  Discovery 

•  QoS  -Quaiity  of  Service 

•  RFC  -  Request  for  Comments 
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